We have deployed iPads to our students with the Allow Modifying Account Settings disabled through our a Casper Configuration Policy to prohibit them using personal Apple IDs for Apps, Music, and other content to be put on our school-owned iPads. We were also using this setting to push Apps through VPP to the devices under the Purchased Section of the App Store where they could download with the cloud icon and not need the Apple ID password we set for them and they do not know. They have discovered what we see as a flaw with the Music App in 8.4 and up as there is an option in the Music App to Sign Out the existing Apple ID and allow signing in with a personal Apple ID and being able to download anything in the Music Store or App Store.
While we can lock down the App Store through the MDM there is no way to prevent them from loading up on Music, TV, and Movies they already own onto the device it prevents us from pushing Apps without giving the the passwords to the Apple IDs we locked into them since the other Casper methods of pushing Apps requires them to have the Apple ID password.
It seems like Apple broke their own MDM framework with the Music App since the disabling Account Settings has worked previously but now is ignored in the Music App regardless of the MDM settings. Any help would be appreciated if anyone has any ideas on this issue.
